Skip to content
OpenAdvisories

Package · Debian

libyaml-perl

2 known vulnerabilities.

1 result · Clear filters · Feed

  • High 7.3

    YAML versions before 1.27_001 for Perl allow a loaded perl/glob document to replace any package variable, which can lead to arbitrary code execution

    YAML versions before 1.27_001 for Perl allow a loaded perl/glob document to replace any package variable, which can lead to arbitrary code execution. A perl/glob document names a package and a symbol, and supplies the value assigned to it. Nothing restricts t…